ipa-adddelegation(1)

NAME
ipa-adddelegation - Add a delegation

SYNOPSIS
ipa-adddelegation [OPTION]... name

DESCRIPTION
Adds a delegation named name. A delegation is used to grant write access to certain attributes from one group to another. For example, a secretary group may be granted write access to modify the phone attribute of all users in a manager's group.

OPTIONS

-a, --attributes=ATTRIBUTES
    A comma-separated list of the attributes that may be written by the source group.

-l  Provide a list of common attribute names. This is not an exhaustive list.

-s, --source=SOURCE
    The name of the group that is being granted write permission.

-t, --target=TARGET
    The name of the group that will be written to.

-v, --verbose
    Display the XML-RPC request and response for more verbose debugging output

All arguments except -v/--verbose are mandatory.

EXAMPLES

ipa-adddelegation -a telephonenumber,facsimiletelephonenumber,mobile -s secretaries -t everyone phones
    Create a delegation named phones that will let anyone in the secretaries group edit the phone numbers of anyone in the group everyone.

EXIT STATUS
0 if the delegation was added successfully 1 if an error occurred 2 if no not exactly one matching source group was found (0 or more than one) 3 if no not exactly one matching target group was found (0 or more than one